Cámara Forense privacy policy
This policy explains what data the Cámara Forense app, offered by Kanku Software Solutions, handles and what your rights are. The app interface is available only in Spanish.
Last updated: October 2, 2026
1. Summary
Cámara Forense works entirely on your device. We have no servers of our own and Kanku Software Solutions does not receive the photographs, locations or any other data you capture. There are no accounts, ads, analytics, tracking or third-party SDKs. The only communication with an external service is a postal address lookup with Apple to show it on screen (see section 6), and the files you choose to export (section 5).
2. Controller and your role
The app is provided by Kanku Software Solutions, contactable at info@kankusoft.com. Kanku Software Solutions develops and distributes the app but has no access to the evidence stored on your device.
Your role. Which photographs you take, of whom or of what, and for what purpose is up to you. If you use the app in the course of professional activity (for example expert reports, investigation or auditing), you —or your organisation— determine the purposes and means of processing the photographs and associated data (people appearing in them, locations, etc.) and must comply with the applicable rules: have a legal basis, inform affected individuals where required, keep data only as long as necessary and protect it. Kanku Software Solutions only provides the tool.
3. Data the app handles and where it is stored
None of this data is sent to Kanku Software Solutions.
| Data | Purpose | Where it is stored |
|---|---|---|
| Captured photograph, with a visible mark of date, coordinates and investigator | To constitute the evidence. | The app’s private space on your device. |
| GPS location (latitude, longitude and altitude) at the moment of capture | To stamp it on the image, in the EXIF metadata and in the control document. | Inside the photo and the control document, in the app’s private space. The app keeps no location history. |
| Investigator name and reason for the capture (if you enter them) | To identify who made the capture and why. | In the photo, the control document and the evidence record. The investigator name is also remembered in the app’s local preferences (UserDefaults) so you do not have to retype it. |
| Date and time of capture, and device data (name, model and iOS version) | To complete the control document. | The evidence’s control document, in the app’s private space. |
| SHA-256 hash of the photo, digital signature and public key | To check the integrity and authenticity of the evidence. | Alongside the evidence. The private signing key lives in the device’s Secure Enclave and never leaves the chip. |
| Encrypted package (AES-256-GCM) and evidence register (index) | Local backup copy and the list in the “Evidencias” tab. | The app’s private space. The encryption key is kept in this device’s keychain. |
Backups. The app excludes evidence from iCloud and computer backups so it does not leave the device. Therefore, if you lose, replace or restore the device, evidence cannot be recovered unless you exported it beforehand (section 5). App preferences, such as the investigator name, may be part of backups depending on your iOS settings.
4. Permissions
Camera
Required to capture photographs. The app only takes photos: it does not record video or audio and does not access the microphone.
Location (while using the app)
Required to stamp GPS coordinates on each piece of evidence. The app only obtains your location while the capture screen is open, does not use it in the background and keeps no history.
Face ID, Touch ID or device passcode
Used only to verify your identity when opening the app. The app does not access biometric data: iOS only tells it whether verification succeeded. If the device has no biometrics, the passcode is used.
Without camera and location permissions, evidence cannot be captured. You can withdraw them at any time in iOS Settings → Privacy & Security. The app does not request access to your photos, contacts or microphone, nor advertising tracking.
5. Exporting and sharing
Only when you choose to, the app hands the files of a piece of evidence (photo, control document, digital signature and public key, or the encrypted package) to the system or app you select through the iOS share sheet (AirDrop, Mail, Files, messaging, etc.). From then on, the recipient handles them under their own terms; Kanku Software Solutions receives nothing back.
Note that the exported photo includes the location, date and investigator name, both in the image (visible mark) and in its EXIF metadata. Share it only with those who should have it.
The encrypted package is a local backup copy: its key is stored only in this device’s keychain and the app does not export it. To give evidence to a third party so they can check its integrity, use “Export for Verification”.
6. Internet and Apple services
The app does not connect to servers of Kanku Software Solutions or of third parties. There is a single exception: to show a readable address (street and city) next to the coordinates on the capture screen, the app uses Apple’s reverse geocoding service (Core Location). To do so, iOS sends the device’s current coordinates to Apple. The address is only shown on screen: it is not saved in the evidence and is not sent to Kanku Software Solutions. Apple handles that data under its privacy policy. Without an Internet connection the address does not appear and capture works the same.
Cámara Forense is distributed through the App Store and, during testing, TestFlight. Apple processes certain data when you download or use those services, under its own privacy policy, and is an independent controller of that processing.
From Apple we only receive, through App Store Connect, aggregated anonymous statistics (for example, the number of downloads). Anonymous diagnostic and usage data, such as crash reports, are shared with us only if you enable “Share with App Developers” in iOS Settings → Privacy & Security → Analytics & Improvements. We receive no personal data that identifies you.
7. What we do not do
- We do not create accounts or ask for registration.
- We have no servers of our own.
- We include no advertising, analytics, tracking, advertising identifiers or third-party SDKs.
- We do not sell or share data with third parties.
- We do not transfer personal data off your device, except for the files you export (section 5) and the address lookup with Apple (section 6).
8. Legal basis
Kanku Software Solutions does not process users’ personal data on its own systems. The app’s access to the camera, location and device authentication is based on your consent, which you give and can withdraw at any time through iOS permissions (Art. 6(1)(a) GDPR); local processing of the data you enter is necessary to provide the functions you request (Art. 6(1)(b)).
As regards people appearing in the photographs you capture, or the data you record about them, the legal basis for processing (for example, a legitimate interest, a legal obligation or the defence of a claim) is determined by you, as explained in section 2.
9. Retention and deletion
Data remains on your device until you delete it:
- One piece of evidence: open the “Evidencias” tab, select it and tap “Eliminar Evidencia”. The photo, control document, signature and encrypted package are deleted. This cannot be undone.
- All data at once: uninstall the app. Evidence, the register and preferences are removed. The cryptographic keys the app stores in the iOS keychain may remain on the device after uninstalling; they contain no personal data.
- Exported copies: files you exported or shared are outside the app; delete them from the places you sent them to as well.
- Permissions: withdraw them in iOS settings (see section 4).
10. Security
The app applies these measures:
- Access protected with Face ID, Touch ID or the device passcode.
- Storage in the app’s private space, with iOS sandboxing and data protection. The photo and the control document have no app-level encryption of their own; the encrypted package is an additional copy.
- SHA-256 hash of the photo, to detect any later alteration.
- ECDSA P-256 digital signature of the control document with a Secure Enclave key that never leaves the chip. On devices without a Secure Enclave the evidence is not signed and the control document states so.
- Encrypted package using AES-256-GCM, with the key stored in this device’s keychain.
- Exclusion of evidence from backups.
No measure is infallible or replaces your own custody procedures. We recommend protecting the device with a passcode and keeping iOS up to date.
11. Your rights
Under Regulation (EU) 2016/679 (GDPR) and Spanish law, you may exercise the rights of access, rectification, erasure, restriction of processing, objection and portability, and withdraw your consent at any time. As Kanku Software Solutions neither receives nor keeps your data, you can exercise them directly on your device:
- Access: the data the app stores is what you see in it.
- Rectification: evidence is a faithful record of what was captured and cannot be edited, precisely to preserve its integrity; if a detail is wrong, delete the evidence and capture it again.
- Erasure: delete the evidence or uninstall the app (section 9).
- Restriction, objection and withdrawal of consent: withdraw the permissions in iOS settings or stop using the app.
- Portability: export the evidence files (section 5).
If you are a person appearing in a photograph taken with the app, Kanku Software Solutions has no access to it: contact whoever captured it, who is the controller of that processing (section 2).
If you prefer to write to us, do so at info@kankusoft.com. We will reply within the legal deadline (one month) and tell you how to exercise the right on your device.
You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the data protection authority of your country of residence.
12. Children
Cámara Forense is a professional tool and is not directed at children under 14. We do not collect data from anyone, children included. If you capture images of minors, you are responsible for doing so in accordance with applicable law.
13. Changes to this policy
We may update this policy, for example if the app’s features or the regulations change. We will publish the current version on this page with its update date. If a change meant handling data differently from what is described (for example, adding services that connect to the internet), we will say so prominently before it applies.
14. Contact
Kanku Software Solutions. Email: info@kankusoft.com.